Hello everyone,
I have made a tool which can remove the source protection from RSLogix 5000 files.
It works on routines, programs, add-on-instructions, and rungs that have been exported as .L5X files.
You can run it in your browser, because it is written in JavaScript.
The directions and program are here ******
You just have to export to XML, put the XML into the webpage, and get the keys or decrypted XML out of the webpage.

<html xmlns="http://www.w3.org/1999/xhtml">
<body><parsererror style="display: block; white-space: pre; border: 2px solid #c77; padding: 0 1em 0 1em; margin: 1em; background-color: #fdd; color: black">
<h3>This page contains the following errors:</h3>
<div style="font-family:monospace;font-size:12px">error on line 2 at column 6: XML declaration allowed only at the start of the document
</div>
<h3>Below is a rendering of the page up to the first error.</h3></parsererror></body></html>

Drag a .L5X file onto this page, or open it in Notepad and paste its contents into the text box
Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data
Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data
Warning: An unsupported EncryptionConfig value was found. Decryption may not work
Unpacked encoded data

I also have error message as "Warning: An unsupported EncryptionConfig value was found. Decryption may not work".
My project is in V13.04 and i converted it to V19.0 to get export routine option. Please help me.

PhredPhlintston wrote:has anyone been successful with unlocking a plc? I have a piece of equipment that is now down and it is locked. No vendor no support.
Please either repost or contact me if you can help

Is it possible to upload the program on your computer? If so, then you could export to an .L5X file and use the tool from above in this thread. I havent tried with a real live PLC that is locked, so it depends on how it was locked.

No, not well. What happened was they made a new EncryptionConfig 5, which used the same algorithms as the old one, but there was a new key and a two byte header. Plus they changed which libraries they were using. My decrypting tool can do the latest version now, so nice try A-B.

skdatmonster3 wrote:
Is it possible to upload the program on your computer? If so, then you could export to an .L5X file and use the tool from above in this thread. I havent tried with a real live PLC that is locked, so it depends on how it was locked.

The PLC lock is something completely different, it is not possible to extract the password from the .ACD file as it only exists in the processor.

skdatmonster3 wrote:
No, not well. What happened was they made a new EncryptionConfig 5, which used the same algorithms as the old one, but there was a new key and a two byte header. Plus they changed which libraries they were using. My decrypting tool can do the latest version now, so nice try A-B.

Your existing decrypt algorithms will only work for versions lower than V20.03 and V21.03, AB have completely changed the security in the newer versions.

Thanks to yeosh99 and Blue Dog for helping out! It is good to see the community helping each other out.

I had to change email addresses a while ago, but I cant change my form email address because it keeps saying "spam from this ip." So I have not been getting emails, but i will try to check in here sometimes. Thanks once again to all you.

I am getting this error : Your browser does not support XPath, please try again with a modern browser
And even if try to decrypt, the error is : Exception caught: ReferenceError: 'XPathResult' is undefined

I am getting this error "Your browser does not support XPath, please try again with a modern browser". I am using IE 11.0.9600. I can-not install other browser on my working notebook.
Please help me to fix it.

I am getting two error:
1: Before dropping .L5X file >> Your browser does not support XPath, please try again with a modern browser.
2: After dropping .L5X file >> Exception caught: ReferenceError: 'XPathResult' is undefined.

This version can now also handle EncryptionConfig="6" which is for newer versions of RSLogix 5000. However, in the new version, they have changed how source keys are stored, so it can't recover source keys when EncryptionConfig="6". I haven't finished looking at that, maybe I can fix it, maybe it would need rainbow tables. Even though, if a file is EncryptionConfig="6", you can still copy the decrypted XML out of the right box, save that in a new .L5X file, and import that into a project to get your logic back.

For those having trouble with XPath in browsers, you need to try with a different browser. I have tested the program in Firefox and Chrome and it is working. If your browser doesn't have XPath or XPathResult, then it won't work and you have to try with a different browser. If you cannot install another browser, maybe copy the file to a different computer and install it there?

hi everybody i try to use this method with a 15 version program but i can´t do it because this version do not have the import/export option, does any body know how to do it in 15 version program?
thanks in advance

Is there a way to Unlock safety controller? If you open the controller properties there is Safety folder and in there:
- Safety Application: Locked and across there is a button Safety Lock/Unlock and if you push the button is ask for the password
All the subroutines in the safety program are open but they are not editable and there is no way to change the controller.

It is probably possible, since there is also a key for safety encryption, but I am hesitant to do, because that is there for life safety and not just DRM.

However, if you want to reuse part of the program, and you do not have the safety lock key, it is already possible to export the whole thing without special tool. If you export/save as the entire project as L5K or L5X, and then import it into new project, I think that will be safety unlocked. You can't go online with controller unless you do a stop and download, and create new safety relationships, but it should work. See this form thread. http://plctalk.com/qanda/showthread.php?t=76593

Thanks skdatmonster3,
used your tool and worked perfect.
You are a real genius to get to the bottom of this )

Now for all other user who are saying cannot use/export .l5x files.

If there is not an option to export the routine into a .l5x file this worked for me.
Saved the project as .l5K file.
Opened the .l5K file and choose to import to a different version.
On this new version also cannot see the routines but have the export option when click right.
After that used the decrypt tool, bingo !!!